stats.fm
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Music stats from Spotify/Apple with ads trackers, optional matching, auto-renew paid plans, and they can close you anytime.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Spotify/Apple account info, usage and cookies, optional age/gender, and payment tokens.
Read the exact line
Privacy policy
“We will receive your publicly available information, as you have enabled through such accounts’ settings (e.g., name and email address) (“Account Information”).”
Training
They use it to run the app, improve it, send marketing if you agree, and for ads and analytics.
Read the exact line
Privacy policy
“We will use your Online Identifiers for analytic and marketing purposes.”
Sharing
Service providers, affiliates, and ad/analytics partners like Google and Facebook can get data.
Read the exact line
Privacy policy
“We may disclose Personal Data to our trusted agents (such as legal counsel) and service providers (including, but not limited to, Cloud providers, Google Analytics, Firebase Crashlytics, CRM provider, etc.)”
Kept
They keep it as long as they need it for the purpose, law, or possible disputes.
Read the exact line
Privacy policy
“unless otherwise specified, we retain Personal Data as long as it is necessary and relevant for us to achieve the purposes for which it was collected”
Controls
You can delete in the app or via a form, unsubscribe, and opt out of some cookies and ads.
Read the exact line
Privacy policy
“You may exercise your through the App setting, or if you don’t have an account or for any other reason by submitting the DSR form.”
Fine print
Subscriptions auto-renew and are usually non-refundable; they can close you anytime; Dutch courts apply.
Read the exact line
Terms of service
“To the extent permitted by applicable law, any fees paid for your purchase of a subscription plan are non-refundable, and we do not provide refunds for any partial subscriptions.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Delete your data in the app or send a DSR
App settings, or DSR form emailed to dpo@stats.fm
Opt out of targeted ads and cookies
Cookie notice, browser/device settings, or Global Privacy Control
Cancel a paid subscription
Apple Pay or Google Pay, as applicable
Turn off Soulmate matching
In-app Soulmate feature opt-out
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can shut your account for any reason or none, without warning.
Read the exact line
Terms of service
“We may terminate these Terms, your access to all or any part of the Services at any time, with or without cause and with or without notice, effective immediately.”
For example, you could lose access overnight and they would not have to email you first.
If someone sues them because of how you used the app, you may have to pay their legal costs.
Read the exact line
Terms of service
“You agree to and the Company and its affiliates, and respective officers, directors, employees and agents from any third-party claims”
For example, if a chat message you sent led to a lawsuit, you could be on the hook for their lawyers.
Paid plans keep charging unless you cancel in the app store.
Read the exact line
Terms of service
“Paid Services in a form of subscriptions are auto-renewed, meaning payments will be auto-renewed following the end of the applicable period.”
For example, after a monthly trial you could be billed again unless you cancel in Apple or Google Pay.
Ad companies can collect data about you on their own for personalized ads.
Read the exact line
Privacy policy
“Where we use third-party advertising cookies, such third-party may independently collect, through the use of such tracking technologies, Personal Data”
For example, Google AdMob or Facebook tools could use your activity to show ads elsewhere.
They share data for marketing even while saying they do not “sell” it in the everyday sense.
Read the exact line
Privacy policy
“we do share Personal Data for analytic and marketing purposes, including targeted advertising, when we promote our website, App or Services.”
For example, cookie IDs can go to ad partners so they can target people like you.
They promise almost nothing if the app is wrong, down, or harmful.
Read the exact line
Terms of service
“THE APP, THE SERVICES AND ANY CONTENT AND FEATURES THEREIN, ARE PROVIDED “AS IS”, “AS AVAILABLE”, AND “WITH ALL FAULTS””
For example, if stats are wrong and you rely on them, they say that is your risk.
An optional feature builds a music-taste profile to match you with others.
Read the exact line
Privacy policy
“If you use our Soulmate Feature, we will be able to profile you based on the music you hear and connect you to other users that have similar taste in music.”
For example, your listening history could be used to pair you with a stranger who likes the same artists.
You can ask to delete in the app or by sending a form, but they do not say how fast it is erased.
Read the exact line
Privacy policy
“You may exercise your through the App setting, or if you don’t have an account or for any other reason by submitting the DSR form.”
For example, you tap delete in settings, then they may still keep copies if the law or a dispute requires it.
They say they use security tools, but they also say nothing is fully safe.
Read the exact line
Privacy policy
“We implement extensive security measures to reduce the risks of damage, loss of information and unauthorized access or misuse of Personal Data.”
For example, they store data in Germany and claim they try to stop unauthorized access.
If you sue, you go to Dutch courts.
Read the exact line
Terms of service
“Each Party agrees that the courts of The Netherlands shall have exclusive to settle any dispute or claim”
For example, a US user would need to bring a case in the Netherlands, not a local .
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- right to erasure
- Your right to have a company delete the personal data it holds about you, with some exceptions. For example, you can ask a social app to wipe your old posts and profile and it must, unless a law says otherwise.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- tracking pixels
- Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
How we got here · grade C · score 42/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect account info from Spotify or Apple Music, usage and analytics, cookies, optional age and gender, and payment tokens—not just what you type.
Does it record your voice, face or body, and what happens to that?
The documents do not describe collecting voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use third-party cookies and SDKs including Google AdMob and Facebook for analytics and targeted ads.
Do they sell or share your data, and can you opt out?
They say they do not sell data for money, but they share it for analytics and targeted ads, with cookie and GPC opt-outs.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete in app settings or by a DSR form, but they keep data as long as needed and do not promise a 30- or 90-day wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Soulmate builds a music-taste profile; they say you can opt out anytime, not that you can view and edit it.
Do they commit to basic security, and have they leaked data?
They describe general security measures and say no system is fully fail-proof. No audit or leak history is named.
Is there a real age gate, and are teens protected?
Terms say you must be at least 12. Privacy says the service is not for children under 13 in the US or 16 in the EEA, with no age-check described.
Will they tell you when the rules change, and is the policy specific?
Policies are dated. Material changes get notice and take effect in 30 days, but retention and some purposes stay general.
Can they close your account without warning, and can you get your data out first?
They may end access at any time, with or without cause or notice, and that may destroy your data.
If something goes wrong, who pays?
The app is as-is with broad disclaimers, and you must indemnify them for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew. Cancel in Apple or Google Pay. Fees are generally non-refundable; price changes on existing plans get 30 days’ notice.
The privacy policy is 5,979 words at a professional or legal expert level (Flesch reading ease 27.2); the terms are 2,372 words at a college level.
